
Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/6buBH_ZyxX_KqwdbAGDoU0O1f7w.roa
File: 6buBH_ZyxX_KqwdbAGDoU0O1f7w.roa (raw, json)
Hash identifier: j+0kUvkq1cI3WAp+xyOk6V6zGst6ZAxLN5DW9UGRECc=
Subject key identifier: E9:BB:81:1F:F6:72:C5:7F:CA:AB:07:5B:00:60:E8:53:43:B5:7F:BC
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1FA4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6buBH_ZyxX_KqwdbAGDoU0O1f7w.roa
Signing time: Wed 18 Jun 2025 06:40:18 +0000
ROA not before: Wed 18 Jun 2025 06:40:18 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8100 (0x1fa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 18 06:40:18 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E9BB811FF672C57FCAAB075B0060E85343B57FBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:58:e8:68:ca:9e:14:9f:23:61:8a:e7:19:4d:
c3:41:f0:4a:58:48:8d:93:e7:39:4c:86:90:9d:8d:
45:b5:d1:d3:c2:c3:cf:6f:f3:7a:cb:7d:59:e5:49:
c8:ed:f6:e7:17:01:f4:8d:7e:45:83:c3:71:a6:ab:
f7:c6:8a:27:7e:97:20:0e:62:21:95:f4:f5:43:d9:
43:f7:58:1f:f7:0e:3b:f8:8c:40:9c:f6:b7:5b:40:
c5:fe:f3:00:a3:90:03:66:fd:b4:47:e5:a1:4e:d5:
3d:b3:6c:36:9e:56:20:12:d0:f2:45:5b:b1:d9:18:
14:99:49:69:12:cb:50:53:6f:c5:62:91:62:3b:5e:
51:d5:ad:a4:5d:a7:8b:7a:09:18:72:e9:2e:cd:39:
40:ad:b3:bd:0f:38:28:73:a7:4c:fe:7f:64:e5:e9:
bd:dc:fe:55:1c:ac:63:d3:de:08:e5:6f:29:c4:74:
fc:c1:4d:b0:ea:8f:db:09:b9:30:9e:74:cc:86:92:
42:31:68:da:6f:c3:0b:6e:41:f5:81:47:96:87:16:
0e:9c:32:9f:c4:fc:fb:3c:c4:14:67:8b:78:8f:f5:
8f:06:3e:c7:76:e6:a3:15:42:82:3e:04:84:b7:6a:
12:44:2a:5c:d6:47:d3:fe:75:ff:72:f1:f8:48:a0:
5e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BB:81:1F:F6:72:C5:7F:CA:AB:07:5B:00:60:E8:53:43:B5:7F:BC
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6buBH_ZyxX_KqwdbAGDoU0O1f7w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:33:65:1e:fb:84:ef:c3:68:b2:f0:2d:af:fd:ce:75:99:9a:
11:95:96:c8:97:e6:a8:b8:aa:0d:4b:f7:a7:fb:45:91:90:e1:
c1:6b:95:2a:63:d0:13:b2:56:17:43:fc:0a:03:6c:7b:8d:a3:
9a:1d:c3:68:14:3c:7c:c3:6a:59:76:29:37:22:4d:cd:1a:f2:
88:56:c1:9b:ef:d5:d1:78:fd:8d:ab:b3:f6:04:10:e1:50:df:
12:18:de:8f:00:e9:41:c3:ad:70:f2:54:9b:7e:3a:18:2d:72:
37:e5:13:37:67:f8:3e:dd:9d:f6:2b:a8:dc:be:56:87:29:d1:
68:bd:7a:e2:5f:63:d6:33:e6:96:3b:00:f1:b5:13:5e:63:d7:
3f:54:dd:7d:26:91:c7:43:99:62:d7:2b:66:0e:31:52:1f:62:
ac:ca:07:f5:49:49:15:63:74:26:72:3f:55:91:4b:2d:ea:6e:
a4:f9:21:bd:33:96:c0:b8:fc:2b:e1:05:24:d2:76:53:42:69:
cd:b2:ef:ba:2a:24:8f:f0:50:39:f6:d9:50:37:94:00:46:9d:
cc:62:55:a3:4b:f1:03:8d:78:6a:16:f6:af:8c:58:4a:86:11:
c7:0a:ed:91:92:a2:39:d9:97:79:f1:74:4b:28:d0:62:4c:a7:
03:b9:cb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:16:18 2025 by rpki-client